client-identifier

Use this entry to designate the client identifier for the session.

Syntax

client-identifier = client_identifier_value

Description

This identifier is added to the credential as the client_identifier attribute and is validated on subsequent requests to ensure that the client does not change.

Options

client_identifier_value
The client identifier value can be in either of the following formats:
CLIENT_IP

The client IP address from the network connection is used as the identifier.

HTTPHDR{<name>}

The contents of the HTTP header, which is identified by <name>, is used as the client identifier. If the HTTP header is missing on the initial request, no identifier is added for the session.

Usage

This stanza entry is optional.

Note: If failover cookies are used, add the client_identifier credential attribute to the failover cookie by modifying the [failover-add-attributes] and [failover-restore-attributes] stanzas. This step ensures that the client identifier can persist across a failover event.

Default value

None

Example


client-identifier = CLIENT_IP
client-identifier = HTTPHDR{X-Forwarded-For}